Facebook HHVM Denial of Service Vulnerability (CNVD-2018-24629)

Facebook HHVM aka HipHop Virtual Machine is a virtual machine from Facebook that significantly improves the performance of loading dynamic pages in PHP. A denial of service vulnerability exists in Facebook HHVM versions 3.24.3 and earlier and 3.21.7 and earlier, which can be exploited by an...

UBUNTU-CVE-2018-6332

A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate resources. This affects all supported versions of HHVM 3.24.3 and 3.21.7 and below when using the proxygen server to handle HTTP2 requests...

Facebook HHVM has multiple vulnerabilities (CNVD-2016-06542)

Facebook HHVM aka HipHop Virtual Machine is a virtual machine from Facebook that significantly improves the performance of loading dynamic pages in PHP. An integer overflow vulnerability and a denial of service vulnerability exists in Facebook HHVM. An attacker can exploit this vulnerability to...

Facebook HHVM has multiple vulnerabilities (CNVD-2016-06544)

Facebook HHVM aka HipHop Virtual Machine is a virtual machine from Facebook that significantly improves the performance of loading dynamic pages in PHP. An integer overflow vulnerability and a denial of service vulnerability exist in Facebook HHVM. An attacker can exploit these vulnerabilities to...

Facebook HHVM has multiple vulnerabilities (CNVD-2016-06546)

Facebook HHVM aka HipHop Virtual Machine is a virtual machine from Facebook that significantly improves the performance of loading dynamic pages in PHP. An integer overflow vulnerability and a denial of service vulnerability exist in Facebook HHVM. An attacker can exploit these vulnerabilities to...

Facebook HHVM has multiple vulnerabilities

Facebook HHVM aka HipHop Virtual Machine is a virtual machine from Facebook that significantly improves the performance of loading dynamic pages in PHP. An integer overflow vulnerability and a denial of service vulnerability exist in Facebook HHVM. An attacker could exploit these vulnerabilities ...

Facebook HHVM has multiple vulnerabilities (CNVD-2016-06545)

Facebook HHVM aka HipHop Virtual Machine is a virtual machine from Facebook that significantly improves the performance of loading dynamic pages in PHP. An integer overflow vulnerability and a denial of service vulnerability exist in Facebook HHVM. An attacker could exploit these vulnerabilities ...

Facebook HHVM Denial of Service Vulnerability

HHWM HipHop VM is a virtual machine launched by Facebook to execute PHP code. Facebook HHVM has a denial of service vulnerability. An attacker can exploit the vulnerability to crash the affected application, denying service to legitimate users...

DEBIAN-CVE-2015-2937

MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM or Zend PHP, allows remote attackers to cause a denial of service "quadratic blowup" and memory consumption via an XML file containing an entity declaration with long replacement text and many references to th...

UBUNTU-CVE-2015-2942

MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM, allows remote attackers to cause a denial of service CPU and memory consumption via a large number of nested entity references in an 1 SVG file or 2 XMP metadata in a PDF file, aka a "billion laughs attack," ...

UBUNTU-CVE-2014-9767

Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/phpzip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/extzip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive...

CVE-2014-2208

CRLF injection vulnerability in the LightProcess protocol implementation in hphp/util/light-process.cpp in Facebook HipHop Virtual Machine HHVM before 2.4.2 allows remote attackers to execute arbitrary commands by entering a \n newline character before the end of a string...

CVE-2014-5386

CVE-2014-5386 affects Facebook HHVM: the mcrypt_create_iv function in hphp/runtime/ext/mcrypt/ext_mcrypt.cpp does not seed the random number generator before HHVM 3.3.0, which enables remote attackers to defeat cryptographic protections by reusing a single initialization vector. Root cause is lac...

CVE-2014-1439

The libxmldisableentityloader function in runtime/ext/extsimplexml.cpp in HipHop Virtual Machine for PHP HHVM before 2.4.0 and 2.3.x before 2.3.3 does not properly disable a certain libxml handler, which allows remote attackers to conduct XML External Entity XXE attacks...

CVE-2014-1439

The libxmldisableentityloader function in runtime/ext/extsimplexml.cpp in HipHop Virtual Machine for PHP HHVM before 2.4.0 and 2.3.x before 2.3.3 does not properly disable a certain libxml handler, which allows remote attackers to conduct XML External Entity XXE attacks...

CVE-2014-1439

The CVE-2014-1439 entry concerns HHVM (HipHop Virtual Machine for PHP). The libxml_disable_entity_loader function in runtime/ext/ext_simplexml.cpp does not properly disable a certain libxml handler, enabling XML External Entity (XXE) attacks. Affected versions are HHVM before 2.4.0 and 2.3.x befo...